CVE-2026-109229 - SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessor
CVE ID :CVE-2026-109229 Published : Oct. 12, 2026, 2:17 p.m. | 1 hour, 14 minutes ago Description :SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIXELS to None in...